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The Snowden Files: British Spies Used Sex and 'Dirty Tricks' 
Slideshow No. 2 

These slides, from a top-secret spy conference in 2010, were 
prepared by GCHQ, the British signals intelligence agency, 
describing cyber operations and proposals for operations. The 
slides focus on the efforts of a unit, the Joint Intelligence 
Research Group, or JTRIG, and include a proposal to use foreign 
journalists for intelligence operations. 

The slides were leaked by former NSA contractor Edward 
Snowden and obtained exclusively by NBC News, which is 
publishing them with minimal redactions. 
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^GCHQ? 



Full-Spectrum Cyber Effects 





SIGINT Development as an enabler 
for GCHQ's "Effects" mission 
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Effects 

Destroy | Deny | Degrade | Disrupt | Deceive | Protect 



Computer Network Attack (CNA) 

Computer Network Information Operations (CNIO) 

Disruption 
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Effects in ^cch 




• Definition: having an impact in the real world 

• Key deliverers: JTRIG and CNE 

• Now major part of business - 5% of Operations 

• Across all target types 

■ Continuous innovation of new tools and techniques 
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CNIO 

Computer Network Information Operations 

• Propaganda 

• Deception 

• Mass messaging 

• Pushing stories 

• Alias development 

• Psychology 



flickr 



You 



facebook 
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Disruption / CNA 



• Masquerades 

• Spoofing 

• Denial of service 

- Phones 

- Emails 

- Computers 




- Faxes 
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Call 
"bombing 



IndividuaUEnterpris 
Low Impact 



WiFi DoS 
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PSYOP 

(social networks 
/phone/ 
email) 



Em*IVSM9 
Spoofing 



Critical 
Infrastructure 



Maritime 
Cyber 




Country wide 
High impact 



Internet 
Routing 



.1(7 yifl <K)l!l ami alar K iii-uipl umkr wfnr t k tnl'<rmantm kyi'Imimr Kchr mil HHi (Hl'rii'J (" li( HQ 



J NBC NEWS INVESTIGATIONS 



investigations.nbcnews.com 



UK TOP SECRET STRAP1 

Information Operations 

INFINITE CURVATURE/MOUNTAIN SLOPE 

Sending messages across the full spectrum of communications 



Telephony SMS 


FAX 


Email 






RADIUS Data ^ 


SALAMANCA 




TDIs 


Data Mining 


Open 


Phone Code 


Source 




Prefix 




IP GEO ^TDIs 
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ROYAL CONCIERGE 

A SIGINT driven hotel reservation tip-off service 



From: reseivationsHgexperis ivahmel.com 
To: now-t3fget@mod.gov.jtK 

"Thank you for reserving " 




ROYAL CONCIERGE exploits these 
messages and sends out daily alerts to 
analysts working on governmental 
hard targets 

What hotel are they visiting? 
Is it SIGINT friendly? 

An en a bier for effects - can we influence the hotel choice? Can we cancel their visit? 
We can use this as an enabter for HUM1NT and Close Access Technical Operations 
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Mobile Information Ops 



50 new mobile TDls being 
Developed by end of 2010 

Also - Target Geographical 
Identifiers (TGI) 



We can shape CNiO against 
specific locations, users with 
a high degree of cognition 
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Human Systems Analysis 



Foreign News Agencies: 

Credential Harvesting 
• Employee Analysis 



SIGDEV 



Data in 




New Data out 
Data out 



Social not technological solution 
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Future? 



Formalising Trad ec raft for Analysts: 

"What SIGDEV needs to be 
done prior to starting an 
Effects operation?" 




Joining up with 5 EYES where possible (cyber development) 



SIP and VoIP Effects - Denial of Service, Psychological Operations 
Provide the defensive advice from the offensive perspective 



